July 18, 2019

Securing IoT – WST

Right now, today, Internet of Things (IoT) devices are generally a security issue.  Unless you plan to ban every mobile device, Dot, Echo, Google Home, Siri, Bixby, and Alexa from earshot of all your spoken business, it is possible these services are capturing this information.  Although not subject to unwanted eves-dropping, even IoT enabled hair straighteners – yes you read that right – are subject to malicious attack, to the point that a hacker can burn down your house.

These days we hear about functionality being implemented to allow the deletion of voice data recorded by Alexa, Bixby, and Siri.  However, some of that data is listened to in real time and some of it is retained by the likes of Amazon to “improve” voice recognition.  Just ask Senator Chris Coons (D-Delaware) who asked Jeff Bezos (CEO of Amazon) in May about how Amazon uses and keeps voice data.  Wait don’t they have something like 650,000 employees, many of whom can speak in entire sentences?

Check out the current 10-D blog post of a real-world scenario that could result in IoT audio snooping of Non-public Personal Information. https://10dsecurity.com/securing-iot/

Past Weekly Security Tips – WST